Pump.fun pauses trading after apparent flash loan attack

Pump.fun is “aware” that bonding curve contracts on Pump.fun were exploited, and has since paused trading

article-image

Dall-e modified by Blockworks

share

Pump.fun was attacked Thursday by an exploiter who seemingly used flash loans to buy out the bonding curve. 

In a post on X, Pump.fun said that it was “aware” that the contracts were compromised and were investigating. 

“We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe,” the team said. “We’ve paused trading — you cannot buy and sell any coins at the moment. Any coins that are currently in the process of migrating to Raydium cannot be traded and will not be migrating for an indefinite period of time.”

Igor Igamberdiev, head of research at Wintermute, analyzed the situation in a series of posts on X, saying that the key was compromised, “though the possibility of an inside job remains.”

Loading Tweet..

Igamberdiev said that the amount lost by Pump.fun is “at least” 12,000 SOL, or roughly $2 million.

An account on X going by Stacc seemed to take credit for the attack, writing “I’m about to change the course of history” in a post

Stacc seemed to imply in his posts that he didn’t intend to keep the stolen funds, but rather planned to transfer the “remaining balances of bonding curves” to some token users. 

Loading Tweet..

It’s not clear as of publication how Stacc was able to execute the attack, or if they’re distributing the balances to random people. 

As Blockworks previously reported, Pump.fun lets developers launch tokens without seed liquidity for a couple of dollars. Its revenue comes from users buying and selling tokens. 

Tokens that exceed market caps of $69,000 can then be listed on the Raydium DEX. 

This is a developing story.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the On the Margin newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

MON - TUES, OCT. 7 - 8, 2024

Blockworks and Bankless in collaboration with buidlbox are excited to announce the second installment of the Permissionless Hackathon – taking place October 7-8 in Salt Lake City, Utah. We’ve partnered with buidlbox to bring together the brightest minds in crypto for […]

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Polygon Call Template (2).png

Research

A significant portion of the call was dedicated to discussing the proposed ZK-PoS Phase 1, which aims to connect Polygon PoS to the AggLayer using a ZK proof of consensus, in addition to a pessimistic proof. This upgrade is intended to generalize how chains settle while protecting chain health and asset integrity. The implementation will involve deploying new contracts for the LxLy unified bridge for token mapping and migrating existing tokens from the PoS portal to the new deployment.

article-image

It may be counterintuitive that a high amount of focus on a technology would lead to security risks — but it’s true

article-image

Structured products are common in traditional finance, but onchain options are scant

article-image

Plus, an update on the ether ETF front and an overview of this week’s economic calendar

article-image

Plus, Solana fell roughly 12% on the week, and for some memecoins the drawdown was even more aggressive

article-image

Mark Wong is currently seeing some profit-taking from early bitcoin adopters, but he also sees buying interest from institutions

article-image

Bitcoin has been in a bull market for 19 months. If March wasn’t the top, that is.